← Database

CVE-2023-20864

CRITICAL CVSS: 9.8 Published: 2023-04-20 Modified: 2026-06-17

Description

VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root.

Affected Platforms

Vmware Aria Operations For LogsVmware Cloud Foundation

Weakness Type

CWE-502, CWE-502

References